Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: 70QkqC+QAb1p6iq7ScfVqvRK6dNYgVmiRACMRsjWj+w=
Subject key identifier: 5C:14:F3:BC:13:D2:A7:0A:32:D8:A0:23:F9:3B:2F:FB:1F:15:6B:BE
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0199FFC823DBB0B1CB09834677BD3B833810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0C3F
Signing time: Mon 20 Oct 2025 04:02:10 +0000
Manifest this update: Mon 20 Oct 2025 04:02:10 +0000
Manifest next update: Tue 21 Oct 2025 04:02:10 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: oqc7cohaqWBgbbj1S0XO5wMLW6c+hhMelDhqkd0gEFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:23:db:b0:b1:cb:09:83:46:77:bd:3b:83:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Oct 20 04:02:10 2025 GMT
Not After : Oct 21 04:02:10 2025 GMT
Subject: CN=5c14f3bc13d2a70a32d8a023f93b2ffb1f156bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:ea:d8:1d:51:e0:66:6b:0f:43:9d:a3:d9:
0a:e0:c5:5f:16:23:5c:cc:7f:98:6e:27:cf:d0:c7:
5b:5a:e3:b2:33:09:8c:01:88:56:39:d4:44:4d:82:
9d:97:3d:bd:bd:e1:1f:a0:b7:e1:81:cb:4c:7c:0d:
c4:c4:74:b8:38:e0:49:ed:22:8c:60:f3:25:af:f5:
b8:90:dc:83:7b:f3:9c:12:bd:ca:72:90:92:fa:83:
9d:75:27:96:ac:03:1b:6f:17:f5:7d:29:6b:25:ea:
ce:46:8f:50:34:42:ca:94:06:a3:4b:2b:5b:b5:d2:
65:58:b8:63:21:12:93:a1:2c:fb:78:dc:e2:39:73:
46:d8:9b:dc:b1:e2:62:11:c8:4f:27:0a:c4:03:65:
4a:02:f2:f3:bd:29:9b:90:31:44:16:21:89:17:fc:
2c:54:a3:6a:60:b7:ba:91:b5:ac:ef:8d:73:ba:0c:
c3:07:78:a6:84:59:6a:05:ab:3e:29:f1:22:f0:95:
2b:a0:29:b4:44:31:4b:14:17:66:22:9d:5e:86:cf:
b3:dc:df:b6:a6:d1:a5:81:23:a1:a0:55:79:3d:06:
71:d2:49:42:79:30:1d:4c:36:00:15:54:be:53:4d:
68:f8:fd:34:18:b5:e8:93:08:7c:6d:87:32:bb:ef:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:F3:BC:13:D2:A7:0A:32:D8:A0:23:F9:3B:2F:FB:1F:15:6B:BE
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5f:ab:85:92:31:e3:ef:95:f7:9d:26:f9:c9:72:0f:a6:f0:
2b:9a:4f:7a:4d:1c:4a:c5:42:7a:89:1c:ad:e1:80:ae:62:7a:
00:90:f1:b0:5f:59:ad:46:55:1b:0a:fb:db:4f:cd:b4:98:68:
39:da:0d:e3:d2:02:4e:86:26:52:29:c0:e8:d3:cb:35:41:b7:
0a:ba:43:01:0d:59:3b:90:31:43:46:85:a0:fd:06:04:5d:36:
12:59:83:d7:cd:78:2d:81:6e:4a:57:95:0f:bb:19:5e:d7:69:
bf:b9:fc:59:3a:13:7c:60:f4:12:62:c3:6c:9b:f0:95:4d:f8:
4a:43:d6:88:40:ae:d3:35:1c:9b:ac:47:5e:70:75:6a:c8:40:
f4:86:9e:90:b8:11:c2:8f:fa:ba:88:14:64:9b:25:a0:6c:5e:
b2:4f:e8:6b:63:c9:24:d9:08:bd:69:9c:bb:f7:d0:b3:f5:6d:
b2:d7:0b:80:55:ec:a3:61:25:0d:47:5b:f3:d0:b4:f6:0e:7d:
14:04:fc:de:92:a9:46:7f:3f:7b:ca:2d:84:87:9d:d8:ce:f9:
81:47:ce:80:97:2b:01:d0:38:a4:5e:ba:5b:37:45:1d:7a:4e:
d6:04:fa:23:b2:95:b0:77:e8:db:54:32:40:7c:55:57:62:6b:
c6:ef:a0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yCPbsLHLCYNGd707gzgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjUxMDIwMDQwMjEwWhcNMjUxMDIxMDQwMjEwWjAzMTEwLwYDVQQD
Eyg1YzE0ZjNiYzEzZDJhNzBhMzJkOGEwMjNmOTNiMmZmYjFmMTU2YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07rq2B1R4GZrD0Odo9kK4MVfFiNc
zH+YbifP0MdbWuOyMwmMAYhWOdRETYKdlz29veEfoLfhgctMfA3ExHS4OOBJ7SKM
YPMlr/W4kNyDe/OcEr3KcpCS+oOddSeWrAMbbxf1fSlrJerORo9QNELKlAajSytb
tdJlWLhjIRKToSz7eNziOXNG2JvcseJiEchPJwrEA2VKAvLzvSmbkDFEFiGJF/ws
VKNqYLe6kbWs741zugzDB3imhFlqBas+KfEi8JUroCm0RDFLFBdmIp1ehs+z3N+2
ptGlgSOhoFV5PQZx0klCeTAdTDYAFVS+U01o+P00GLXokwh8bYcyu+8uOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwU87wT0qcKMtigI/k7L/sfFWu+MB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjF+rhZIx
4++V950m+clyD6bwK5pPek0cSsVCeokcreGArmJ6AJDxsF9ZrUZVGwr720/NtJho
OdoN49ICToYmUinA6NPLNUG3CrpDAQ1ZO5AxQ0aFoP0GBF02ElmD1814LYFuSleV
D7sZXtdpv7n8WToTfGD0EmLDbJvwlU34SkPWiECu0zUcm6xHXnB1ashA9IaekLgR
wo/6uogUZJsloGxesk/oa2PJJNkIvWmcu/fQs/VtstcLgFXso2ElDUdb89C09g59
FAT83pKpRn8/e8othIed2M75gUfOgJcrAdA4pF66WzdFHXpO1gT6I7KVsHfo21Qy
QHxVV2Jrxu+gSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:15:02 2025 by rpki-client